umputun
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| remark42 | 2 | – | Nov 5, 2026 |
Exploited and recent CVEs
- CVE-2026-77463 Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deployment 0.2%
- CVE-2026-48788 Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing 0.3%